www.wiki.altjira-ts.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:12:0a:55:08:df:d2:86:75:39:9e:72:84:94:8f:e9:70 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wiki.altjira-ts.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:12:0a:55:08:df:d2:86:75:39:9e:72:84:94:8f:e9:70
Serial Number (int): 322951945959571226937808965686490108520816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:f5:67:db:57:b9:5e:a8:74:17:68:de:37:e0:43:2b:27:f3:e0:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:0a:a5:bf:35:f5:9f:93:30:b2:59:d2:ad:c7:20:46:19:14:4e:cd
Fingerprint (sha256): 25:cc:bc:3f:24:aa:af:0a:7d:e7:2f:bd:98:2e:2e:c0:c3:8b:26:d7:73:24:97:df:dc:f5:96:2e:4e:9b:63:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.wiki.altjira-ts.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wiki.altjira-ts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altjira-ts.com
*.bettersecuritythroughpiglatin.com
*.kimwhiteband.com
*.kkinsey.com
*.knowledgepropertiesllc.com
altjira-ts.com
bettersecuritythroughpiglatin.com
kimwhiteband.com
kkinsey.com
knowledgepropertiesllc.com
www.bettersecuritythroughpiglatin.altjira-ts.com
www.excesstoneeds.altjira-ts.com
www.k01.altjira-ts.com
www.k02.altjira-ts.com
www.kimwhiteband.altjira-ts.com
www.kkinsey.altjira-ts.com
www.knowledgepropertiesllc.altjira-ts.com
www.kosmos.altjira-ts.com
www.pipmsg.altjira-ts.com
www.wiki.altjira-ts.com

Other certificates including the domain name altjira-ts.com

(limited to 100 certificates)
*.altjira-ts.com
kimwhiteband.altjira-ts.com
*.kkinsey.com
kkinsey.com
kkinsey.com
www.k01.altjira-ts.com
bettersecuritythroughpiglatin.com
www.kimwhiteband.altjira-ts.com
www.wiki.altjira-ts.com
kkinsey.com
kkinsey.com
kkinsey.com
www.inm.uyo.temporary.site
kkinsey.com
kkinsey.com
kkinsey.com
www.website-6eb7db29.altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
www.kosmos.altjira-ts.com
*.kkinsey.com
altjira-ts.com
www.website-6eb7db29.altjira-ts.com
pipmsg.xyz
kkinsey.com
kkinsey.com
pipmsg.xyz
www.k01.altjira-ts.com
pipmsg.xyz
www.kosmos.altjira-ts.com
www.kimwhiteband.altjira-ts.com
kimwhiteband.com

Certificate

The complete raw certificate details for www.wiki.altjira-ts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FZbMvgo7wNbgOEk7PLF
HbsIrHocy5yur0k19iZw1yDjeuCKwGl1OQDLbdXOfV2M8s63OolmUm50JKT+Ponq
EtvJXOYj5H5WrvSeNXrAdTO7c6HXWujGJfmoEfKKn+gm+qrr7W+eo3vjb2dMcZO5
ETziuJNgnymp9qh3saDxMy4LcWECR23xHaY88Fc1cSP0kqu4ch6WQSERiHBlnJfi
kYSlhh8YL1IxIhkK5wsIPy4gH4EF2L3vDLBGa1CjXK+u21Ge/j9XEdTsfdCt+Vcu
n+iWGbX7iX9moANiQTsGL2ibxYCTMRQQvAVQGvbQIhgxT+y7IItH9PIMYw6NgwQe
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322951945959571226937808965686490108520816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-17 10:07:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-15 10:07:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wiki.altjira-ts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28319964164658789511357135977765048384030214746627758662204093404244852302964006319324570998626118084886865988035251132212383757050485505410775791882864953494466349329128529510055266881150386387847734424814490800857436141838544379504610150958399238618673782778406704285358229895587072480182713052654549336383087912760913188560398262523593404883004783389490553315689518489560034603748208060539101241469529874364381150099525797550224686136843460573665533527585763678217834451238790309085462437896205255386257773449683406151660674652724113544464634634629129281375652135285008959098893287236979987820009911147004762005209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bf567db57b95ea8741768de37e0432b27f3e082
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (549 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettersecuritythroughpiglatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimwhiteband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowledgepropertiesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettersecuritythroughpiglatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimwhiteband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgepropertiesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettersecuritythroughpiglatin.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excesstoneeds.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k01.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k02.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimwhiteband.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkinsey.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledgepropertiesllc.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosmos.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipmsg.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.altjira-ts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001820bd7def10000040300483046022100c31e5bdd45f213f2d1696dbcd38edd92626cc9f910493dcd3e2e9501b47c6a3d022100fc2b6ff6b2efbbf7f4735b5a3168533351641ec863a0c0a94c987feca30d72660076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001820bd7ded500000403004730450220374e69de2c36da773c0689a4f4f6a79e958fb7bd6c0d7f594de1f8e211477c9a022100b42af5002e02572c3fa05fd588d3c2cd70f1f652d5dafec478aafd67615d9217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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